Add note about POODLE attack against SSLv3

2014-10-15 11:22:09 -04:00 · 2014-10-15 11:22:09 -04:00 · fe256f3be7
parent 25cbfb8942
commit fe256f3be7
1 changed files with 1 additions and 1 deletions
--- a/h5bp/directive-only/ssl.conf
+++ b/h5bp/directive-only/ssl.conf
@ -1,4 +1,4 @@
-# Protect against the BEAST attack by not using SSLv3 at all. If you need to support older browsers (IE6) you may need to add
+# Protect against the BEAST and POODLE attacks by not using SSLv3 at all. If you need to support older browsers (IE6) you may need to add
 # SSLv3 to the list of protocols below.
 ssl_protocols              TLSv1 TLSv1.1 TLSv1.2;